$ rpki-client -vvf rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft File: B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft (raw, json) Hash identifier: ivu/NOQxoFMjRCy0XPmtOvqYerGp3K2hdA7CO60cMGo= Subject key identifier: C9:12:12:EB:80:94:0C:24:4A:2A:30:51:A9:B5:1A:6B:AB:AE:1D:DD Authority key identifier: B2:B4:8A:9C:04:8B:51:CD:13:3A:D0:AE:E6:F5:F9:EB:73:DA:16:85 Certificate issuer: /CN=B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685 Certificate serial: 1A8F409AE157F8CEF2608C41A665A1DA4FFE995B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 08:33:19 +0000 Manifest this update: Wed 17 Jun 2026 08:28:19 +0000 Manifest next update: Thu 18 Jun 2026 10:21:19 +0000 Files and hashes: 1: B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.crl (hash: ipGe1HVYaKntveT90ViusFrCa2UfyZjYBcdT1MMiTu4=) 2: 3130332e3138372e3232362e302f32332d3234203d3e20313439373238.roa (hash: sTfiDvuvbkVeyTPfpKYSFsI9nMpAT34o8x5bhe0xkFw=) 3: 3130332e3138372e3232362e302f32342d3234203d3e20313439373238.roa (hash: SMAdsArRGPYxDZsZ/CCe6hdzjIJy0KvpAA+wvauroZY=) 4: 3130332e3138372e3232372e302f32342d3234203d3e20313439373238.roa (hash: ksYVDZOsUaPH9h3h6FXJXhC94WZiPEsTowZUMKAvBn0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.crl rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:8f:40:9a:e1:57:f8:ce:f2:60:8c:41:a6:65:a1:da:4f:fe:99:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685 Validity Not Before: Jun 17 08:28:19 2026 GMT Not After : Jun 18 10:21:19 2026 GMT Subject: CN=C91212EB80940C244A2A3051A9B51A6BABAE1DDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:75:5b:43:1d:d5:e3:96:30:01:74:54:bf:c4: 0e:ea:14:b5:1c:3e:49:dc:39:56:0d:d7:19:b6:1c: 4d:b7:f2:38:3a:27:86:71:f3:51:e9:ab:57:c8:6e: 1d:cc:c1:01:96:6c:48:77:05:e7:ef:3f:51:7e:7f: 8d:44:49:81:13:98:f0:c4:b8:94:fa:f9:9d:6f:0e: b1:b2:0b:bf:ea:24:c8:bb:e0:92:a7:b4:59:a3:6a: 31:9c:90:1b:65:67:3d:26:e0:ed:e4:58:da:dc:be: 92:59:2e:33:fa:36:93:32:b7:0c:75:db:ca:a8:63: 6a:b9:2b:c0:7e:88:4e:62:06:f5:d5:56:77:8d:cc: 44:b8:46:45:13:fa:5f:72:2e:c4:df:d7:bf:b7:b4: 1a:7f:1b:7f:43:05:d6:c3:fa:39:d4:74:8b:95:9f: d1:36:e8:71:dc:a7:7b:3e:1d:fa:a0:c4:c6:e8:85: 2d:14:b5:0f:64:32:e0:ee:0f:0a:4c:2a:25:13:84: 53:7e:26:56:86:90:a1:94:15:87:1f:12:89:82:37: 80:38:d1:5d:c4:e7:45:77:d3:f6:87:ff:94:b8:44: 45:a6:d5:5b:04:e9:a6:1a:04:b8:5f:ec:4d:98:5c: 98:f3:cf:d3:6e:20:85:1d:02:a2:f9:bd:f2:5f:24: 1e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:12:12:EB:80:94:0C:24:4A:2A:30:51:A9:B5:1A:6B:AB:AE:1D:DD X509v3 Authority Key Identifier: keyid:B2:B4:8A:9C:04:8B:51:CD:13:3A:D0:AE:E6:F5:F9:EB:73:DA:16:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:4a:68:b1:0c:4b:1c:19:84:9c:2a:d4:be:c6:06:d5:1e:e1: 34:70:47:04:87:29:ef:a3:c7:f8:1b:6d:55:a1:44:9f:25:fa: 33:e6:42:37:bf:95:58:9a:b4:7f:3b:ba:36:eb:8e:cd:b8:0c: 79:cb:f9:0e:fc:3d:69:f6:3c:14:6b:ff:7c:bb:c0:00:83:b8: 8d:6d:c1:7e:39:f2:0e:9b:c4:2d:aa:af:1c:c2:31:b0:21:b5: bf:23:ed:8a:48:cb:91:70:13:f4:9f:d0:21:9c:6f:75:df:c8: ee:ce:67:81:c5:e0:56:03:ff:97:ff:31:8d:7c:37:05:b4:00: dc:cd:5f:80:13:09:85:8e:83:ed:80:65:c1:6b:83:ef:9d:be: c9:36:8f:aa:cb:76:c8:c0:7c:43:92:b9:f7:fc:66:e5:5e:bd: 43:53:b8:85:55:a0:6d:5b:64:83:bd:e5:23:6e:3c:a3:25:f1: 2f:0c:a9:d8:6c:0e:fc:7b:fb:6d:06:91:21:7d:03:d7:bd:96: 30:bd:92:98:e6:5c:ce:2e:a3:ff:01:15:b0:f0:b9:d2:30:0e: 2d:70:53:d5:e4:1b:72:9d:8a:e1:8d:ef:fd:2a:aa:49:e6:4b: 72:3c:8d:9b:52:73:41:e5:36:b3:5a:fe:c8:e1:1c:26:3b:d9: 27:da:ea:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGo9AmuFX+M7yYIxBpmWh2k/+mVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJCNDhBOUMwNDhCNTFDRDEzM0FEMEFFRTZGNUY5RUI3 M0RBMTY4NTAeFw0yNjA2MTcwODI4MTlaFw0yNjA2MTgxMDIxMTlaMDMxMTAvBgNV BAMTKEM5MTIxMkVCODA5NDBDMjQ0QTJBMzA1MUE5QjUxQTZCQUJBRTFEREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCedVtDHdXjljABdFS/xA7qFLUc PkncOVYN1xm2HE238jg6J4Zx81Hpq1fIbh3MwQGWbEh3BefvP1F+f41ESYETmPDE uJT6+Z1vDrGyC7/qJMi74JKntFmjajGckBtlZz0m4O3kWNrcvpJZLjP6NpMytwx1 28qoY2q5K8B+iE5iBvXVVneNzES4RkUT+l9yLsTf17+3tBp/G39DBdbD+jnUdIuV n9E26HHcp3s+HfqgxMbohS0UtQ9kMuDuDwpMKiUThFN+JlaGkKGUFYcfEomCN4A4 0V3E50V30/aH/5S4REWm1VsE6aYaBLhf7E2YXJjzz9NuIIUdAqL5vfJfJB71AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyRIS64CUDCRKKjBRqbUaa6uuHd0wHwYDVR0j BBgwFoAUsrSKnASLUc0TOtCu5vX563PaFoUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTYzMDk3ZjAtMzk3OC00OWNlLWI2OWMtNGIyMGI0ZGNmYjdlLzAvQjJCNDhBOUMw NDhCNTFDRDEzM0FEMEFFRTZGNUY5RUI3M0RBMTY4NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMkI0OEE5QzA0OEI1MUNEMTMzQUQwQUVFNkY1RjlFQjczREEx Njg1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTYzMDk3ZjAtMzk3OC00OWNlLWI2 OWMtNGIyMGI0ZGNmYjdlLzAvQjJCNDhBOUMwNDhCNTFDRDEzM0FEMEFFRTZGNUY5 RUI3M0RBMTY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtKaLEMSxwZhJwq1L7GBtUe4TRwRwSHKe+j x/gbbVWhRJ8l+jPmQje/lViatH87ujbrjs24DHnL+Q78PWn2PBRr/3y7wACDuI1t wX458g6bxC2qrxzCMbAhtb8j7YpIy5FwE/Sf0CGcb3XfyO7OZ4HF4FYD/5f/MY18 NwW0ANzNX4ATCYWOg+2AZcFrg++dvsk2j6rLdsjAfEOSuff8ZuVevUNTuIVVoG1b ZIO95SNuPKMl8S8MqdhsDvx7+20GkSF9A9e9ljC9kpjmXM4uo/8BFbDwudIwDi1w U9XkG3KdiuGN7/0qqknmS3I8jZtSc0HlNrNa/sjhHCY72Sfa6qg= -----END CERTIFICATE-----Generated at Wed Jun 17 10:40:39 2026 by rpki-client